[pve-devel] pvefw: using ctmark to associacte connections to VMs

[Dietmar Maurer]

> >>What is the advantage of using dynamic value? You want to save RAM?
> I'm thinking of users who's have small server, will small ram and other users
> who's have big server and big ram.
> 
> But sure, we can tune net.netfilter.nf_conntrack_max, but users must be
> warned to do it.

What is the disadvantage having that as default?